CVE-2026-39253

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivotal.Core.Common.dll and Pivotal.Engine.Client.Services.Conversion.dll components.

Published 2026-06-23. Last modified 2026-06-25.